Security Technical Spec Lead

job summary

candidates will be considered based on their qualifications and the candidate’s ability to work from an approved work location. Aep will consider qualified candidates who are willing to relocate to an approved work location, at the candidate’s expense, provided the relocation can be completed within a timeframe that meets aep’s staffing needs. All remote work locations require vetting and final approval prior to offer and/or start date.

Any work locations listed as preferred or unapproved relate specifically to the requirements for this position and are not necessarily applicable to other posted positions.

this position is for a security technical specialist lead - staff who will administer cybersecurity tools used to defend and protect aep. Primary responsibilities include deployment, use, maintenance, and evolution of enterprise endpoint security software and tools.

• deploy, use, maintain and evolve cybersecurity tools on premise and in the cloud.
• collect and analyze cybersecurity requirements.
• create new or refine existing cybersecurity processes.
• contribute to the resolution of cybersecurity incidents.
• develop and maintain documentation of cybersecurity systems, projects and/or processes to ensure unified understanding.
• collaborate with other technology areas and business units.

• help coordinate some work assignments of lower-level teammates. Contribute to the creation of a climate in which people want to do their best.
• develop and present cybersecurity documents and reports clearly, concisely, and effectively. Adjust delivery style to fit target audience.
• identify, clarify, resolve, and initiate solutions to cybersecurity problems requiring data analysis.
• formulate questions and seek clarification before applying cybersecurity measures.
• produce status reports with minimal guidance from higher level teammates. Maintain an awareness of time constraints for work activities; make appropriate adjustments when needed.
• participate in team initiatives and meetings by preparing, making contributions and following through on agreements.
• participate in activities to ensure aep is in compliance with laws, regulations and standards such as nerc cip, sox, privacy, and pii.
• demonstrate the utmost flexibility and capability to switch from one activity to another on short notice. Willingness to work overtime for incident response for security events.
• this position may require some work outside of normal hours and being on call.

• demonstrate cybersecurity-specific working knowledge of, or experience with, several of the items from the following list:
• endpoint protection software and technologies
• unix/linux command line operations
• windows active directory
• tcp/ip
• network infrastructure, including dns, firewalls, routers, switches and load‑balancers
• packet capture software (wireshark, fiddler, etc.)
• scripting / development using python, powershell, bash, or perl.
• strong understanding of application control methodology.
• demonstrate knowledge of endpoint troubleshooting skills in windows and/or linux environments.
• demonstrate knowledge of how traffic flows through networks.
• experience in operational technology/critical infrastructure, preferably with nerc cip experience.

• architect, engineer, develop, deploy, and administer xdr edr solutions for the aep environment.
• architect, engineer, develop, deploy, and administer endpoint security solutions for the aep environment.
• support integration of endpoint tools with existing solutions to enhance visibility of user activity across all of aep’s services.
• responsible for architecting, engineering, deploying, and administering the configurations and policies for aep’s endpoint tools.
• continually evaluate the effectiveness and efficiency of endpoint solutions and policies as needed to tune configurations to reduce false positive events while improving detection of high quality, quantifiable and measurable risk events while also maintaining optimal system performance and stability.
• responsible for troubleshooting complex issues on user and server endpoints in a large…